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REMARKS 

Claims 1-29 are pending in the present application. Reconsideration of the claims is 
respectfully requested. 

I. ?gy^ t g>§ 102i Anticipation 

The examiner rejects claims 1, 3-7, 9-12, 14-18, 20, 21, 23-27 and 29 as anticipated by 
Mandahl et al. f Enterprise Information and Communication Management System and Method. 
U.S. Patent Application Publication 2002/0091639 (July 11, 2002) (hereinafter "Mandahf*). 
This rejection is respectfully traversed. 

Regarding claim 1, the Office Action states: 

Mandahl teaches a method in a data processing system for 
managing access to a set of applications associated with a universal 
resource locator (page 2, para.[0039]), the method comprising: 

receiving a request, wherein the request includes the universal 
resource locator and a user identification (page 3, para.[0035], {0039]); 
and 

directing the request to a selected application within the set of 
applications using the universal resource locator and the user 
identification- (page 3, para. [0035], [0038], [0039], "Portal directory 120 
provides the facilities for application and service access, individual user 
personalization, user authentication, information flow, group membership 
and access; and user profile information, among others. Portal directory 
120 can accommodate any number of applications and services through 
the use of component object models (COM) and registration within portal 
directory 120. COM constructs provide standardized interfaces for access 
to complex applications and services . Registration of an application or 
service in portal system 1 0 provides a reserved allocation of resources and 
a known connection ." and "For example, a Uniform Resource Locator 
(URL) may be registered as a service or application with portal directory 
120 for access by a particular set of individual or groups. The URL may 
be tied to an application or service that is used to varying degrees by the 
individual or groups to which it is allocated- For example, one user may 
require access to a certain aspect of a given service represented by a URL, 
while a group or department may wish to utilize a number of detailed 
aspects of the application or service.") 

Office Action of July 25, 2005, pp. 2-3 (emphasis in original). 

A prior art reference anticipates the claimed invention under 35 U.S.C. § 102 only if every 
element of a claimed invention is identically shown in that single reference, arranged as they are in 

the claims. In re Bond, 910 R2d 831, 832, 15 US J>.Q.2d 1566, 1567 (Fed Cir. 1990). All 
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limitations of the claimed invention must be considered when determining patentability. In re 

Lowry> 32 F,3d 1579, 1582, 32 U.S.P.Q.2d 1031, 1034 (Fed. Cir, 1994), Anticipation focuses on 

whether a claim reads on the product or process a prior art reference discloses, not on what the 

reference broadly teaches. Kalman v. Kimberly-Clark Corp., 713 F,2d 760, 218U.SJ.Q. 781 (Fed. 

Cir. 1983). In this case, each and every feature of the presently claimed invention is not identically 

shown in the cited reference, arranged as they are in the claims. 

Claim 1 is as follows: 

1. (Original) A method in a data processing system for managing 
access to a Bet of applications associated with a universal resource locator, 
the method comprising: 

receiving a request, wherein the request includes the universal 
resource locator and a user identification; and 

directing the request to a selected application within the set of 
applications using the universal resource locator and the user 
identification. 

Mandahl does not teach the claimed feature of "directing the request to a selected 
application within the set of applications using the universal resource locator and the user 
identification" as recited in claim 1. The examiner incorrectly asserts otherwise, More 
specifically, the examiner cites to the following portion of Mandahl as teaching the directing step 
of claim 1 : 

[0035] Operations within intranet 16, such as communications like e-mail 
or facsimiles, are recorded by a transaction server 17, Each connection to 
intranet 16 must be authenticated by an authentication service 19, 
Transaction server 17 and authentication service 19 are relied upon by 
portal system 10 to provide the framework for portal implementation. For 
example, portal system 10 includes tools to import authentication data 
bases from authentication service 19. When authentication data bases are 
imported, portal system 10 can provide authentication service to the 
organization users for all registered applications and services. A discussion 
o f service and application registration is provided below. 

Mandahl, paragraph 0035. 

As can be seen in this cited section, Mandahl discloses the use of different 
components within an intranet. This section also teaches that these components are used 
to provide an authentication service. However, the step of receiving a request, wherein 
the request includes the universal resource locator and a user identification is not found in 
this cited section. 
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The examiner also points to the following portion of Mandahl as showing the 
receiving step; 

[0039] Portal directory 120 interacts with various standard applications, 
services and data base engines through a connector layer 122. Connector 
layer 122 contains a number of interface translators or engines that provide 
a conduit between portal directory 120 and other services and applications. 
For example, a Uniform Resource Locator (URL) may be registered as a 
service or application with portal directory 120 for access by a particular 
set of individuals or groups. The URL may be tied to an application or 
service that is used to varying degrees by the individuals or groups to 
which it is allocated. For example, one user may require access to a certain 
aspect of a given service represented by a URL, while a group or 
department may wish to utilize a number of detailed aspects of the 
application or service. 

Mandahl, paragraph 0039. 

This cited section in Mandahl teaches that a URL may be registered as a service or 
application with the portal directory for access by a particular set of individuals. However, 
Mandahl does not teach how this access occurs, In particular, no teaching is present for receiving a 
request, wherein the request includes the universal resource locator and a user identification. No 
mention of a request including a universal resource locator and a user identification is mentioned. 

In addition, Mandahl' & portal allows a particular individual access to different aspects of an 
application. However, Mandahl does not teach directing a request to a selected application within 
the set of applications using the user identification and the same URL that refers to the entire set of 
applications in the manner claimed. In the claimed invention, one URL refers to all applications 
within the set of applications, hi Mandahl, one URL refers to one application and Mandahl *s portal 
allows different users different levels of access to that application. The two functions are entirely 
distinct. Thus, Mandahl does not show all of the features of claim 1. 

In addition, in paragraph 35 Mandahl only broadly refers to the general necessity of 
authentication in an intranet environment and teaches a method of supporting authentication. 
Paragraph 0035 does not teach a request that includes both the Universal Resource Locator and 
the user identification, as claimed. Additionally, paragraph 0039 does not teach that the request 
received by the portal is a combination of the authentication information and the URL as 
claimed. Instead, Mandahl teaches that the user authentication and request for a resource are two 
distinct steps within its scope, For example, Mandahl also teaches that: 
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[0048] Referring now to FIG. 5, a diagram of authentication flow and 
service access is shown. When a user first signs in to the portal services, 
they do so through a user sign-on 76. During user sign-on 76, the user will 
enter an ID and a password that identifies the user to the system. The user 
ID and password are sent to a super user authentication 78 for verification 
of the user and registration with all other authentication services. By being 
successfully authenticated through super user authentication 78, the user is 
provided access to all authenticating services and applications, in the 
format which the user has selected in the user profile. A successful super 
user authentication is passed to a transaction server 80, which has access 
to all the various applications and services desired by the user. Transaction 
server 80 previously accesses and queries services 86, 88 and 90 shown in 
FIG. 5 to obtain a service summary 82 according to the information 
settings and the user profile. Once the user becomes authenticated and has 
access to transaction server 80, service summary 82 is presented to an 
authenticated user access space 84. The authenticated user may then 
review the sendee summary provided to the user as a result of membership 
in the particular groups associated with services 86, 88 and 90, and the 
settings in the user profile. 

Mandahl y paragraph 0048. 

Mandahl unequivocally states, "Once the user becomes authenticated and has access to 
transaction server 80, service summary 82 is presented to an authenticated user access space 84. 
The authenticated user may then review the service summary provided to the user as a result of 
membership in the particular groups associated with services 86, 88 and 90, and the settings in 
the user profile". In other words, the user must be authenticated as a first step. Then ,upon 
successful authentication, the user is presented with a service summary from which to request the 
application or service of interest as a second step. Thus, Mandahl teaches a two step process 
indicating that the request does not include the URL and the user identification together, as 
claimed. Therefore, Mandahl does not teach the claimed step of '^receiving a request, wherein 
the request includes the universal resource locator and a user identification " Because Mandahl 
does not teach all of the features of claim 1, Mandahl does not anticipate claim 1, 

Regarding claim 3, the examiner states: 

Mandahl teaches the method of claim L wherein the user identification is 
a user name located within the request (page3, para.[0035],[O038],[0039] 4 
page 4, para. [0048], "Portal directory 120 provides the facilities for 
a pplication and service access, individual user personalization user 
authentication, information flow, group membership and access; and user 
profile information, among others. Portal directory 120 can accommodate 
an y number of applications and services through the use of component 
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object models (COM) and registration within portal directory 120, COM 
constructs provide standardized interfaces for access to complex 
a pplications and services. R egistration of an application or service in 
portal system 10 provides a reserved allocation of resources and a known 
connection,"^ 

Office action of My 25, 2005, pp. 3-4 (emphasis in original). 

Mandahl does not teach in the cited paragraphs or elsewhere that the user authentication 
uses a user name located within the request. Those of ordinary skill in the art know that user- 
authentication can be accomplished using any one of a variety of distinct methods including, but 
not limited to, user name, user ID, a Personal Identification Number (PIN), or an Internet 
protocol address (IP address). Additionally* even if Mandahl purports to encompass all the 
methods of user identification, Mandahl does not disclose that the user identification is located 
within the request with the URL, as in the claim 3. Consequently, Mandahl does not anticipate 
claim 3 under 35 USC § 102, and it is respectfully urged that the rejection of claim 3 has been 
overcome. 

Referring to claims 4 and 5, the examiner states; 

Mandahl teaches the method of claim 1 further comprising: replacing the 
selected application with a new selected application, and the method of 
claim 4, wherein the new selected application is a new version of the 
selected application* (page 4, para.[0O43], "An application server 130 
provides application and services resources to various individuals and 
groups through portal directory 120. For example, mobile connection 1 14 
may require special software and applications for mobile related services 
that differ from those required by on-line connection 110 to view or 
manipulate the same information. T he application and software that 
permits mobile connection user 114 to manipulate information a lso 
accessible to on-line connection 1 10 can be stored on application server 
130.") 

Office action of July 25, 2005, p. 4. 

However, the examiner is mistaken in interpreting the notion of "different applications 
for the same purpose" as "different versions of the same application." The two statements are 
not equivalent It is conceivable that a new version of the same application may do more or less 
than the previous version; essentially retaining some commonality with the previous application 
but not necessarily for the same purpose. Besides other possible differences, the purpose of the 
new version may be expanded or restricted as needed, As another example, a new version may 
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be a new copy of the previous version of an application for exactly the same puipose, in exactly 

the same way. Mandahl 's clear teachings do not encompass this meaning. Thus, the phrase 

"special software and applications for mobile related services that differ from those required by 

on-line connection 1 10 to view or manipulate the same information," as the examiner discerns 

from Mandahl, does not read on the feature of "a new version of the selected application," as 

claimed in claim 4, Thus, Mandahl does not anticipate claim 4 under 35 USC § 102. For the 

same reasons, Mandahl does not anticipate claim 5. 

Regarding claim 7, the examiner states: 

Mandahl teaches a method in a data processing system for managing 
access to a plurality of applications, the method comprising: associating 
the plurality of applications with a first universal resource locator; 
assigning the plurality of applications with plurality of universal resource 
locators excluding the first universal resource locator; receiving a request 
including the first universal resource locator and an identification of a 
user; and redirecting the request using the first universal resource locator 
to a particular application within the plurality of applications using a 
particular universal resource locator associated with the particular 
application based on the identification. (page3, para.[0035yoO38],[0039J, 
"Portal directory 120 provides the facilities for application and service 
access, individual user personalization, user authentication, i nformation 
flow, group membership and access; and user profile information, among 
others. Portal directory 120 can accommodate any number of applications 
and services t hrough the use of component object models (COM) and 
registration within portal directory 120. COM constructs provide 
standardized interfaces for access to complex applications and services. 
Registration of an application or service in portal system 10 provides a 
reserved allocation of resources and a known connection " and "Portal 
directory 120 interacts with various standard applications, services and 
data base engines through a connector layer 122. Connector layer 122 
contains a number of interface translators or engines that provide a conduit 
between portal directory 120 and other services and applications. For 
example, a Uniform Resource Locator (URL) mav be registered as a 
service or application with portal directory 120 for access by a particular 
set of individuals or gr oups The URL mav be tied to an ap plication or 
service that is used t o varying deereea bv the individuals or groups to 
which it is allocated. Fo r example, one user mav require access to a certain 
aspect of a given s ervice represented bv a URL, while a group or 
department mav wis h to utilize a number of detailed aspects of the 
application or service." T hus, the reference teaches the claimed elements.) 

Office action of July 25, 2005, pp. 5-6 (emphasis in original). 
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The examiner's statement that applications and method of access to those applications in 

Mandahl anticipates the claimed invention is mistaken* The paragraphs cited by the examiner are 

reproduced below: 

[0035] Operations within intranet 16, such as communications like e-mail 
or facsimiles, are recorded by a transaction server 17. Each connection to 
intranet 16 must be authenticated by an authentication service 19. 
Transaction server 17 and authentication service 19 are relied upon by 
portal system 10 to provide the framework for portal implementation. For 
example, portal system 10 includes tools to import authentication data 
bases from authentication service 19. When authentication databases are 
imported, portal system 10 can provide authentication service to the 
organization users for all registered applications and services. A discussion 
of service and application registration is provided below. 

Mandator paragraph 0035. 

Mandahl docs not teach the feature of "associating the plurality of applications 
with a first universal resource locator, assigning the plurality of applications with 
plurality of universal resource locators excluding the first universal resource locator." In 
Mandahl , applications have different URLs for the express purpose that they are used by 
the user through those different URLs. This fact is in stark contrast with the claimed 
feature of ''associating the plurality of applications with a first universal resource locator; 
assigning the plurality of applications with plurality of universal resource locators 
excluding the first universal resource locator/' In Applicants' claim, the application's 
assigned URL is not exposed to the requestor; rather, the requester uses a common first 
URL to access any of such applications from the set of applications. On the other hand, 
Mandahl 's teaches managing access to the various applications and services by a variety 
of users and user-groups. 

The examiner also cites the following paragraph against claim 7; 

[0038] The engine behind operation of portal system 10 is indicated in 
FIG. 2 as a portal directory 120. Portal directory 120 provides the facilities 
for application and service access, individual user personalization, user 
authentication, information flow, group membership and access; and user 
profile information, among others. Portal directory 120 can accommodate 
any number of applications and services through the use of component 
object models (COM) and registration within portal directory 120. COM 
constructs provide standardized interfaces for access to complex 
applications and services. Registration of an application or service in 
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portal system 10 provides a reserved allocation of resources and a known 
connection. 

Mandahl, paragraph 0038, 

The cited portion of Mandahl teaches the basic functions of the portal directory 

120. Portal directory provides the facilities for applications and service access* Although 

portal directory 120 can accommodate "any number of applications and services/ 1 portal 

directory 120 does not associate "the plurality of applications with a first universal 

resource locator; assigning the plurality of applications with plurality of universal 

resource locators excluding the first universal resource locator/* as claimed The 

examiner highlights that Mandahl provides for "any number of applications and 

services, " but fails to observe that these applications and services are all distinct from one 

another. Thus, paragraph 0038 does not show all of the features of claim 7. 

[0039] Portal directory 120 interacts with various standard applications, 
services and data base engines through a connector layer 122, Connector 
layer 122 contains a number of interface translators or engines that provide 
a conduit between portal directory 120 and other services and applications. 
For example, a Uniform Resource Locator (URL) maybe registered as a 
service or application with portal directory 120 for access by a particular 
set of individuals or groups. The URL may be tied to an application or 
service that is used to varying degrees by the individuals or groups to 
which it is allocated. For example, one user may require access to a certain 
aspect of a given service represented by a URL, while a group or 
department may wish to utilize a number of detailed aspects of the 
application or service. 

Mandahl* paragraphs 0039, 

Again, Mandahl does not teach or suggest the features of claim 7 as claimed. A URL 
may be registered as a service for access, but that URL refers to only one application and not to a 
plurality of applications, as explained with respect to claim 1 , The examiner further highlights 
that Mandahl provides for "standardized interfaces for access to complex applications and 
services" and "a known connection." This statement only means that the interfaces to Mattdahl's 
applications and services are defined according to some standard, thereby affording predictability 
to the users accessing them through these interfaces. It is well known to one of ordinary skill in 
the art that a URL is a kind of interface. 
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This fact is illustrated finther in that Mandahl teaches that: 

a Uniform Resource Locator (URL) may be registered as a service or 
application with portal directory 120 for access by a particular set of 
individuals or groups The URL may be tied to an application or service 
that is used to varying degrees by the individuals or groups to which it is 
allocated. For example, one user may require access to a certain aspect of a 
given service represented by a URL, while a group or department may 
wish to utilize a number of detailed aspects of the application or service. 

Mandahl, paragraph 0039. 

This text further clarifies that Mandahl ties the URL used by the user to an application or 
service, unlike die claim in question which allows the user/requester to use a common URL for 
all the applications in the set. The process of registration of a URL with the portal directory is 
simply a commonly known method for making the URL known to the users. However, this fact 
is irrelevant vis-&-vis the claimed invention. Furthermore, Mandahl teaches no apparent need, 
technique, or mechanism for object replication and common URL access to copies of objects, as 
claimed. Therefore, Mandahl does not teach the features of olaim 7. 

Regarding claims 3, 6, 9- 12, 14-18, 20, 21, 23-27, and 29, these claims contain similar 
features presented in claim 1 . Thus Mandahl does not anticipate any of these claims at least for 
the reasons presented above vis-4-vis claim 1. Additionally, claims 3, 6, 9-12, 14-18, 20, 21, 23- 
27, and 29 claim other additional combinations of features not taught or suggested by the 
reference. For example, Mandahl does not teach or suggest that each application within the set 
of applications is assigned to a different URL and, by implication from claim 1, the same URL, 
as claimed in claims 6, 17, and 26, The examiners assertions to the contrary are incorrect for 
similar reasons as those pointed out above. Mandahl teaches using one URL to point to one 
application and does not teach or suggest otherwise. Hence, Mandahl does not teach all of the 
features of claims 1, 3-7, 9-12, 14-16, 20, 21, 23-27, and 29. Therefore, the rejection of claims 1, 
3-7, 942, 14-18, 20, 21, 23-27 and 29 under 35 U.S.C. § 102 has been overcome. 

II. 35 U.S,C. S 103. Obviousness 

The examiner rejects claims 2, 8, 13, 19, 22 and 28 as obvious over Mandahl in view of 
Lee et aL, Method and Apparatus for Providing Security for Servers Executing: Application 
Programs Received Via a Network. U.S. Patent 6,167,522 (December 26, 2000). This rejection 
i s respectfully traversed. 
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Regarding claim 2, the examiner states: 

Keeping in mind the teachings of Mandahl, Mandahl specifically 
fails to teach the method of claim 1, wherein the user identification is an 
internet Protocol address of a node originating the request. 

Lee teaches in coL 3, line 9-16 3 "An application program that is to 
be provided by a Web server along with a source identifier is received by 
the Web server via a network* such as, the Internet. The source identifier 
functions as an indication of sponsorship. The entity sponsoring, or 
vouching for, the reliability of the application program signs the 
application program. Thus, the level of trust afforded the signing entity is 
granted to applications programs signed by that entity." Thus Lee teaches 
that the source identification is the IP address of a node originating the 
request, 

Therefore, it would have been obvious for one in ordinary skill in 
the art at the time the invention was made to add the teachings of Lee to 
Mandahl 's system such that, as taught by lee, The source identifier 
Amotions as an indication of sponsorship. The entity sponsoring, or 
vouching for, the reliability of the application program signs the 
application program. Thus, the level of trust afforded the signing entity is 
granted to applications programs signed by that entity. 

Office Action of July 25, 2005, pp. 10-1 1. 

If the Patent Office does not produce a prima facie case of unpatentability, then without 
more the applicant is entitled to grant of a patent In re Oetiker, 977 F.2d 1443, 1445, 24 
U,SP.Q.2d 1443* 1444 (Fed. Cir, 1992); In re Grabiak, 769 F.2d 729, 733 f 226 U.S.P.Q. 870, 873 
(Fed. Cir. 1985). A prima facie case of obviousness is established when the teachings of the prior 
art itself suggest the claimed subject matter to a person of ordinary skill in the art. In re Bell, 991 
F.2d 781, 783, 26 US J>.Q.2d 1529, 1531 (Fed. Cir. 1 993). All limitations of the claimed invention 
must be considered when determining patentability. In re Lowry> 32 F.3d 1579, 1 582, 32 
U.SJ\Q.2d 103 1, 1034 (Fed Cir. 1994), A proper prima facie case of obviousness cannot be 
established by combining the teachings of the prior art absent some teaching, incentive, or 
suggestion supporting the combination. In re Napier, 55 F.3d 610, 613, 34 U.S.P.Q,2d 1782, 1784 
(Fed. Or. 1995); In re Bond, 910 F,2d 83 1, 834, 15 U.S.P.Q.2d 1566, 1568 (Fed. Cir. 1990), 

Claim 2 is as follows: 

2. The method of claim 1, wherein the user identification is an 
Internet Protocol address of a node originating the request. 

The examiner has failed to state a prima facie obviousness rejection against claim 2. 
Claim 2 depends from claim 1 and, as shown above, Mandahl does not teach or suggest all of the 
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features of claim 1, Furthermore, Lee does not cure the deficiencies oiMandahl in this regard. 

For this reason alone, the proposed combination does not teach all of the features of claim 2. 

Accordingly, the proposed combination does not result in the claimed invention and the examiner 

has failed to state a prima facie obviousness rejection against claim 2. 

In addition, the proposed combination does not teach all of the features of claim 2 

because neither Lee nor Mandahl teach or suggest the claimed feature that the user identification 

is an Internet Protocol (IP) address, The examiner concedes that Mandahl does not show that a 

user identification is an Internet Protocol address. The examiner cites to Lee as showing this 

deficiency, as follows: 

An application program that is to be provided by a Web server along with 
a source identifier is received by the Web server via a network, such as, 
the Internet. The source identifier functions as an indication of 
sponsorship. The entity sponsoring, or vouching for, the reliability of the 
application program signs the application program. Thus, the level of trust 
afforded the signing entity is granted to applications programs signed by 
that entity* 

Lee t coL 3, 11. 9-16. 

However, Lee does not teach or suggest that the source identification is the IP 

address of a node originating the request. Lee simply states that a source identifier is 

provided along with an application program that is to be provided by a Web server. This 

statement does not teach or suggest that the'source identifier is an IP address. 

Additionally, the source identifier cannot be an EP address under the situation that Lee 

describes. Lee expressly states this fact: 

According to the present invention, a host may send a program, such as a 
servlet, to Web server 150. When Web server 150 receives a servlet and a 
source identifier from a source computer, the source of the servlet is 
checked to determine the access privileges available to the servlet. It is 
important to note that source identifiers indicate the entity that sponsors 
or vouches for the reliability of the servlet, not she source computer from 
which the servlet is received. Thus, a servlet may be signed by a particular 
entity and distributed by many other computers that may or may not be 
associated with the signing entity. Web server 150 may reject a servlet 
from an unknown or known hostile source, or Web server 150 may accept 
and load a servlet and grant access to server resources based on the source 
identifier. Once the servlet is loaded by Web server 1 50, it may be 
accessed by a Web browser running on a host connected to Web server 
150. 
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Lee, col. 3, 11. 34*50 (emphasis supplied). 

Thus, a source identifier is not an identification of the source computer, but rather 
the source entity. A source computer can be identified by an IP address, but not a source 
entity, like Microsoft Corporation, which is Lee's intent. Because Lee rejects the notion 
of accepting a source computer identified by an IP address as a valid sponsor for its 
purpose, Lee actually teaches away from the notion proposed by the examiner. Certainly, 
Lee cannot teach what the examiner concedes is deficient in MandahL For this reason, 
the proposed combination does not teach ail of the features of claim 2. Accordingly, the 
examiner has failed to state a prima facie obviousness rejection of claim 2. 

In addition, the examiner has failed to state a prima facie obviousness rejection 

against claim 2 because the examiner has not provided a proper motivation to combine 

the references. The examiner states that: 

Therefore, it would have been obvious for one in ordinary skill in the art at 
the time the invention was made to add the teachings of Lee to Mandahl 's 
system such that, as taught by Lee, Hie source identifier functions as an 
indication of sponsorship. The entity sponsoring, or vouching for, the 
reliability of the application program signs the application program. Thus, 
the level of trust afforded the signing entity is granted to applications 
programs signed by that entity. 

Office Action of July 25, 2005, p. 1 1 . 

However, as shown above, and supported by Lee 's own disclosure, Lee actually 
teaches against IP address as being a user identification. Thus, Lee specifically 
contradicts the examiner's statement and vitiates any implied motivation contained within 
the examiner's statement. Accordingly, the examiner has failed to state a proper 
motivation to combine the references. 

Furthermore, even if Lee 's teachings were combinable with MandahVs system, 
the examiner has provided no actual motivation to combine the references. At most, the 
examiner's statement could be construed to be an advantage, However, to constitute a 
proper motivation, the examiner must establish that one of ordinary skill would both 
recognize the advantage and have a reason to implement the advantage. For example, a 
first reference may disclose the use of lasers to achieve nuclear fusion. A second 
reference may disclose that ultra-high power lasers deliver more energy* One of ordinary 

skill may recognize that an ultra-high power laser would be more useful to achieve 
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nuclear fusion, though one of ordinary skill would be motivated to avoid combining the 
references because of the extreme expense of ultra-high power lasers. In this example, 
one of ordinary skill is motivated to avoid implementing the combination, even if he or 
she recognized the advantage, and so no motivation exists to combine the references. In 
the case at hand, the examiner has not provided any reason why one of ordinary skill 
would recognize the proposed advantage or have a reason to implement it; especially in 
the light that Lee teaches away from claim 2. For this reason, the examiner's statement 
fails to provide a proper motivation to combine the references. Accordingly, the 
examiner has failed to state a prima facie obviousness rejection. 

In addition, claim 2 is non-obvious in view of Mandahl and Lee when the 
references are considered as a whole because Lee teaches away from claim 2. As 
provided above, Lee actually teaches against IP address as being a user identification. 
Thus, one of ordinary skill would be motivated to avoid combining the references. 
Accordingly, claim 2 is non-obvious in view of Mandahl and Zee. 

In addition, the claims are non-obvious in view of Mandahl and Lee because these 

references are directed to solving different problems. Mandahl is directed to solving problems 

associated with multiple user authentications, as shown below: 

[0015] User authentication is another area that is difficult to handle within 
a large organization containing many different departments. Typically, due 
to the different missions and goals of each department, individuals within 
a department will need access to a variety of different applications, which 
typically do not overlap in their usefulness within different departments. It 
is often the case that a user in a given department will have to authenticate 
themselves to the various applications through multiple logins, each with 
typically a different password and user name. For departments which have 
application intensive needs, the authentication process for each application 
may become repetitive and frustrating. The typical user prefers to logon 
and authenticate one time only, and often will be reluctant to use a system 
in which multiple authentications are required 

[0016] One widely used technique to overcome the problems of having 
multiple user authentications is to map all user logons in a secure data 
base, The user simply indicates a desire to access a particular service, and 
the stored user ID and password are retrieved from the secure data base, as 
indicated by the mapping to the user's name, and are used as input for their 
service authentication. However, this technique requires that the secure 
data base be updated for each new user, or whenever a new system is 
implemented. Further administration for the secure data base is required if 
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users must change their passwords or user ID periodically. This 
requirement places a large administrative burden on the individuals whose 
task it is to maintain the secure data base. Again, this solution is somewhat 
resource intensive, and can be cumbersome when a large number of 
services are used by multiple departments. 

Mandahl, paragraphs 15 and 16. 

In contrast, Lee is directed to the problem providing security for servers that receive 

applications, as shown below: 

Because servlets may require access to server resources, the all-or-nothing 
approach is inefficient. In order to provide a secure all-or-nothing scheme 
in a server that loads servlets, a standard subset of resources would be 
offered to all servlets. However, different servlets require different 
resources and different servlet sources may be worthy of different levels of 
trust. Thus, prior security schemes do not provide a flexible, yet secure, 
environment for providing servlets on a server. Therefore, it would be 
desirable to provide security to Web servers from potentially hostile 
programs, wherein permissions to access the resources of the server are 
granted based on the source of the program. 

As the Web grows, it would be desirable to provide greater access to the 
resources and features of the Web. Thus, many controllers of Web servers 
may wish to provide access to servlets developed by third parties. 
Therefore, it would be desirable to provide security to Web servers from 
potentially hostile servlets, wherein access to the resources of the server 
are allocated based on the source of a particular servlet. 

Lee, col. 2, 11. 12-32. 

The problems addressed by Lee and Mandahl are distinct, Mandahl is directed to 
problems associated with multiple user authentications, whereas Lee is directed to securely 
receive applications over a network. The two problems have nothing to do with each other and 
the solutions to the problems have nothing to do with each other. Because the references are 
directed toward different problems, one of ordinary skill would have no reason to look to Lee for 
the problem addressed by Mandahl, Hence, no motivation exists to combine the references. 
Accordingly, the claims are non-obvious in view of Mandahl and Lee when the references are 
considered as a whole. 

Claims 8, 13, 19, 22, and 28 contain similar features presented in claim 2. Thus, 
at least for the reasons presented above, the examiner has failed to state a prima facie 
obviousness rejection of these claims. Similarly, claims 8, 13, 19, 22, and 28 are non- 
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obvious in view of the references at least for the reasons presented above. Therefore, the 
rejection of claims 2» 8, 13, 19, 22, and 28 under 35 U.S.C. § 103 has been overcome, 

ni. Conclusion 

It is respectfully urged that the subject application is patentable over Mandahl and 
Lee and is now in condition for allowance. 

The examiner is invited to call the undersigned at the below-listed telephone number if in 
the opinion of the examiner such a telephone conference would expedite or aid the prosecution 
and examination of this application. 

DATE; November 23, 2005 



Respectfully submitted, 




or' 



Theod«eD. Fay in 
Reg. No. 48,504 
Yee & Associates, P.C. 



P.O. Box 802333 
Dallas, TX 75380 
(972) 385-8777 



Attorney for Applicants 
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